Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33322d3332203d3e20323635343235.roa
File:                     323830343a333365633a3a2f33322d3332203d3e20323635343235.roa (raw, json)
Hash identifier:          L9r+HjAP1DPde/qtrGNSZkTeLON9LEGucH6eekb8+vQ=
Subject key identifier:   33:98:C2:46:A8:86:CB:45:C9:90:16:BB:52:14:73:11:9C:86:32:11
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       1297A35C31641999D31ED30C2B73A3E63B20B96E
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33322d3332203d3e20323635343235.roa
Signing time:             Wed 03 Apr 2024 18:31:03 +0000
ROA not before:           Wed 03 Apr 2024 18:26:03 +0000
ROA not after:            Wed 02 Apr 2025 18:31:03 +0000
asID:                     265425
IP address blocks:        2804:33ec::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:a3:5c:31:64:19:99:d3:1e:d3:0c:2b:73:a3:e6:3b:20:b9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr  3 18:26:03 2024 GMT
            Not After : Apr  2 18:31:03 2025 GMT
        Subject: CN=3398C246A886CB45C99016BB521473119C863211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:bf:5c:c6:f7:7e:af:f6:60:04:5e:d0:3b:
                    b9:3d:43:aa:10:eb:cc:61:fe:54:9d:d9:de:a7:fe:
                    3e:77:65:ae:78:b1:76:9d:cd:5f:70:99:a2:78:a1:
                    51:34:f5:e2:81:09:69:33:ae:67:9b:c5:a7:19:ec:
                    94:41:18:2d:30:81:0a:24:61:79:16:75:c8:bf:f8:
                    3a:5b:ca:13:83:06:67:e8:3a:63:3f:4c:05:fa:e6:
                    0e:c2:0c:3e:6c:f5:6a:7f:3c:51:e5:53:c2:58:65:
                    2b:51:04:bd:02:25:c3:92:ca:67:b8:e7:e3:99:0f:
                    02:1e:e6:3f:0e:ce:dc:4f:e6:33:69:8a:46:d1:65:
                    07:e1:be:51:75:e5:af:90:0c:88:c9:24:8b:12:d2:
                    cf:ec:e0:da:ec:8b:58:b6:44:36:4d:30:af:b1:3e:
                    5f:99:f3:dd:6e:04:44:25:90:4f:db:64:db:eb:82:
                    1c:43:46:88:a9:b1:3d:3e:d4:65:67:9b:b1:27:70:
                    44:08:64:74:7d:2f:3f:ca:13:e7:8b:d5:30:f2:25:
                    da:a3:99:0b:4e:70:26:5f:01:63:86:da:24:74:5b:
                    92:ee:06:de:76:72:8c:77:be:b3:44:ee:8d:92:59:
                    ff:20:77:8c:fc:ca:2d:4a:37:39:ab:ac:01:4b:37:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:98:C2:46:A8:86:CB:45:C9:90:16:BB:52:14:73:11:9C:86:32:11
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/323830343a333365633a3a2f33322d3332203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:24:9c:3e:14:ce:a3:9f:00:d3:8b:2a:c0:14:5d:b5:db:
         b2:89:14:6c:d2:aa:de:a8:65:4f:ed:33:e7:2c:00:66:f6:dd:
         8d:fc:3e:f6:dc:3f:09:89:92:0a:7b:7b:a2:a2:48:a9:97:cb:
         64:fd:c8:16:a9:b6:5f:bf:90:fb:b7:98:b5:d4:82:96:b4:23:
         1e:ab:21:02:06:16:42:ce:ee:b2:f2:b6:db:be:ae:d8:f5:07:
         50:0e:5f:5a:81:ce:72:91:be:94:5d:e1:11:e2:77:ce:db:9f:
         68:b7:cc:c3:4b:4a:33:d6:53:11:7d:fb:5d:90:bd:05:aa:4b:
         7c:06:fa:15:47:25:cc:30:ba:7f:fd:fd:83:17:00:7b:00:21:
         e9:c9:3f:c1:80:ac:d9:e0:75:4e:7c:ff:e8:59:5e:f6:4f:3c:
         35:af:b4:6a:72:56:0e:74:4a:61:2c:51:27:37:f1:75:ef:20:
         30:c6:94:d8:7d:7f:d4:58:54:54:9d:24:7d:9c:46:5a:0a:17:
         4b:15:f3:0b:76:eb:0e:6f:20:5a:c7:5d:7b:41:4c:4e:56:b3:
         74:96:b0:3c:07:78:8d:75:f7:b6:1f:83:bc:f7:14:8f:43:a6:
         57:4e:87:6e:8a:ad:9a:bd:51:4c:db:57:f0:05:d2:6d:c4:4d:
         73:a3:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org